This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e312e302f32342d3234203d3e20313336373837.roa File: 3139332e34322e312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 8nCjE889fEMRyl4rRwhoHO3YweKRVXXLDJmoHVvSN2w= Subject key identifier: B1:63:FB:1E:37:D6:18:50:A5:55:F6:B0:E2:B2:ED:30:DB:08:B2:0E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7CF3F1F6FDD7493A53C758E1FB0BD8225835B023 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e312e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:59 +0000 ROA not before: Mon 29 Dec 2025 09:45:59 +0000 ROA not after: Mon 28 Dec 2026 09:50:59 +0000 asID: 136787 IP address blocks: 193.42.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f3:f1:f6:fd:d7:49:3a:53:c7:58:e1:fb:0b:d8:22:58:35:b0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:59 2025 GMT Not After : Dec 28 09:50:59 2026 GMT Subject: CN=B163FB1E37D61850A555F6B0E2B2ED30DB08B20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:52:3c:af:03:68:d7:2c:59:ed:e7:d2:ac: 8c:77:a8:de:52:ca:9e:e2:49:fd:d2:e5:e2:7f:44: 84:86:50:bb:56:7b:96:03:7f:88:04:43:d4:bc:27: 29:67:83:37:2a:33:4b:24:3c:00:85:6d:e6:82:b4: a6:3a:32:60:57:3e:17:39:fd:1c:83:9a:1e:8a:88: da:ac:ba:fa:a1:08:e8:96:05:d7:6c:72:f6:76:a4: 55:25:2b:4d:42:0e:74:85:37:6e:83:0b:51:5d:c7: 62:f9:20:97:a0:5a:ee:61:51:29:78:79:5e:6c:f8: 6b:32:df:df:3f:b0:25:90:15:d1:1b:60:5f:e2:4c: b4:93:a4:73:a0:aa:46:b0:db:75:98:fc:13:36:0e: 74:e3:65:3b:4f:00:68:e6:b1:99:e2:ef:84:23:ab: 0f:3a:77:30:06:3a:71:f6:5c:c3:af:4c:31:00:3e: 78:68:fb:3e:2e:aa:80:9e:b1:9a:cd:40:3d:cf:c4: 87:71:a0:d0:bf:ba:44:9d:3d:9e:b0:ac:98:d5:6a: da:f8:ca:0b:a9:29:ea:3b:08:70:99:3f:11:e7:d8: 64:51:d1:f0:15:19:09:ce:8d:05:60:66:68:9e:9d: 19:48:c6:dc:0a:33:45:54:58:15:68:80:f4:78:65: ee:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:63:FB:1E:37:D6:18:50:A5:55:F6:B0:E2:B2:ED:30:DB:08:B2:0E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.1.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f4:f7:c8:29:12:97:41:43:0b:49:a5:48:2a:b1:0a:43:9f: f0:c7:ab:fa:3a:9d:1b:5c:10:66:58:db:79:cd:5d:e0:36:46: 82:a5:6b:36:45:3d:38:17:ea:a3:09:33:66:8e:e3:31:6c:ff: 39:a0:6d:64:88:fa:21:a1:de:b8:d1:56:22:e1:a6:8d:ef:82: 1d:bc:db:99:96:37:e8:ca:f0:fb:1f:a8:93:22:71:9f:82:42: dd:9c:e2:f9:1f:43:80:b8:0c:e5:f5:ca:81:ea:f1:cf:19:1c: e0:92:1d:32:aa:ea:34:1a:59:35:71:fb:d6:a7:a5:03:a8:cd: 23:7b:19:da:b4:15:ee:17:27:ef:25:f9:6c:6c:c1:ec:40:c1: c0:51:72:1f:0a:23:4b:39:ca:de:94:b0:5b:de:f9:bf:f2:c7: 6d:af:56:77:d0:a1:71:f1:08:fb:da:c5:cc:e0:12:fc:a0:42: 0c:a7:b8:cf:98:d8:52:bb:3a:24:b8:8f:13:7a:fa:0b:fd:7c: b3:f3:56:05:64:1a:00:af:87:49:c9:5e:ce:dd:8a:f1:8b:4b: ce:44:df:37:99:a3:e7:58:a3:7a:63:76:44:76:cb:76:d9:2e: 92:73:0b:3a:60:f9:43:fa:d9:24:f3:30:7e:f3:5a:4f:3e:1d: 9b:08:21:3d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUfPPx9v3XSTpTx1jh+wvYIlg1sCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTlaFw0yNjEyMjgwOTUwNTlaMDMxMTAvBgNV BAMTKEIxNjNGQjFFMzdENjE4NTBBNTU1RjZCMEUyQjJFRDMwREIwOEIyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm01I8rwNo1yxZ7efSrIx3qN5S yp7iSf3S5eJ/RISGULtWe5YDf4gEQ9S8JylngzcqM0skPACFbeaCtKY6MmBXPhc5 /RyDmh6KiNqsuvqhCOiWBddscvZ2pFUlK01CDnSFN26DC1Fdx2L5IJegWu5hUSl4 eV5s+Gsy398/sCWQFdEbYF/iTLSTpHOgqkaw23WY/BM2DnTjZTtPAGjmsZni74Qj qw86dzAGOnH2XMOvTDEAPnho+z4uqoCesZrNQD3PxIdxoNC/ukSdPZ6wrJjVatr4 ygupKeo7CHCZPxHn2GRR0fAVGQnOjQVgZmienRlIxtwKM0VUWBVogPR4Ze4dAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUsWP7HjfWGFClVfaw4rLtMNsIsg4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzNDMyMmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEq ATANBgkqhkiG9w0BAQsFAAOCAQEAUPT3yCkSl0FDC0mlSCqxCkOf8Mer+jqdG1wQ Zljbec1d4DZGgqVrNkU9OBfqowkzZo7jMWz/OaBtZIj6IaHeuNFWIuGmje+CHbzb mZY36Mrw+x+okyJxn4JC3Zzi+R9DgLgM5fXKgerxzxkc4JIdMqrqNBpZNXH71qel A6jNI3sZ2rQV7hcn7yX5bGzB7EDBwFFyHwojSznK3pSwW975v/LHba9Wd9ChcfEI +9rFzOAS/KBCDKe4z5jYUrs6JLiPE3r6C/18s/NWBWQaAK+HSclezt2K8YtLzkTf N5mj51ijemN2RHbLdtkuknMLOmD5Q/rZJPMwfvNaTz4dmwghPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:53:34 2026 by rpki-client